Utility for TLSA lookup

[dane-monitoring-plugins.git] / check_dane / resolve.py

diff --git a/check_dane/resolve.py b/check_dane/resolve.py
index df490b7b0161b5fd092bf60e2bbc328a415858df..ab930f7b54df48facdd5e5846f362297f46e64da 100644 (file)
--- a/check_dane/resolve.py
+++ b/check_dane/resolve.py
@@ -5,7 +5,7 @@ import logging
 from datetime import datetime
 
 from unbound import ub_ctx, ub_strerror
-from unbound import RR_TYPE_A, RR_TYPE_AAAA, RR_TYPE_RRSIG
+from unbound import RR_TYPE_A, RR_TYPE_AAAA, RR_TYPE_RRSIG, RR_TYPE_SRV
 
 from ldns import ldns_wire2pkt
 from ldns import LDNS_SECTION_ANSWER
@@ -64,6 +64,16 @@ def dnssec_verify_rrsig_validity(data, warn=-1, critical=0):
         return 1
 
 
+def srv_lookup(name, resolver):
+    retval = []
+    result = resolver.resolve(name, rrtype=RR_TYPE_SRV)
+    for bytevalue in result.data.raw:
+        priority, weight, port = struct.unpack("!HHH", bytevalue[:6])
+        hostname = '.'.join(result.data.dname2str(bytevalue[6:]))
+        retval.append(((hostname, port), {'priority': priority, 'weight': weight}))
+    return retval
+
+
 class ResolverException(BaseException):
     def __init__(self, message):
         BaseException.__init__(self)